Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: H8okSkmNBG9E0MWO3o0+q/we6JlE7P766TuetMI4og8=
Subject key identifier: A4:32:FF:E5:1E:8C:9A:DA:7C:FF:5C:A2:C6:AE:53:6B:D7:C5:04:13
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019D2C2A6DC40718212C7ED942B3636D5B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1655
Signing time: Thu 26 Mar 2026 22:01:11 +0000
Manifest this update: Thu 26 Mar 2026 22:01:11 +0000
Manifest next update: Fri 27 Mar 2026 22:01:11 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: aVs_pTCF35izq7eFYVQj7GDKKKg.roa (hash: HUtPfJfh73XSHYvTDAm1hqZnRW91m33+bqE8cdLnnnE=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: 2TNIc7sKwy9wjj518OyJ98Zt374LlBtBoqQecjk8hNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:6d:c4:07:18:21:2c:7e:d9:42:b3:63:6d:5b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Mar 26 22:01:11 2026 GMT
Not After : Mar 27 22:01:11 2026 GMT
Subject: CN=a432ffe51e8c9ada7cff5ca2c6ae536bd7c50413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:14:63:c4:1a:30:dd:a3:3e:3b:05:18:52:
d8:23:dc:9c:d8:2c:3b:c8:9b:d2:79:01:8a:4b:a3:
0a:47:9d:47:42:fc:2b:ce:a9:f5:cd:3d:17:d6:46:
b3:0f:f7:07:28:8d:24:de:46:d7:68:b8:f4:e6:4a:
69:b7:d1:a8:ce:c5:51:af:2c:ce:56:96:c1:b8:bc:
78:1d:b5:30:00:01:6e:3e:4a:18:ce:bc:95:aa:27:
88:44:c7:49:8e:a3:4f:16:fd:2e:51:b4:86:0e:44:
f1:41:4d:1b:ba:3e:17:6c:d5:91:e3:89:de:0e:ec:
b4:3f:3d:4c:17:7a:97:f1:13:bd:ad:cf:6f:2c:ab:
7e:f5:ec:4f:10:b5:6c:0b:37:75:4a:d7:24:bd:b8:
70:37:a4:4b:30:fc:2c:38:a8:4c:5b:bc:1c:0e:38:
e4:6c:09:26:dd:4b:15:6f:07:1f:f8:d2:f0:c8:fe:
3e:71:7d:8a:cf:3f:e6:9e:7d:83:2f:01:1b:04:d8:
7f:10:35:c8:cf:89:03:87:27:61:07:63:6d:f2:ab:
e4:89:fc:40:71:0e:c1:8b:46:79:c1:96:97:5b:b9:
27:ab:4e:79:d2:90:00:b0:b1:33:fd:6d:2a:3d:bf:
e2:e6:ef:27:18:91:16:08:b5:9f:92:b4:c3:0e:32:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:FF:E5:1E:8C:9A:DA:7C:FF:5C:A2:C6:AE:53:6B:D7:C5:04:13
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5b:f4:b6:c5:60:f8:1a:90:01:12:65:1b:a3:b1:0c:63:94:
01:84:8f:90:a3:92:4d:fb:d6:b7:b0:94:d1:cc:9e:1d:98:5a:
f0:dd:44:75:dc:67:29:bb:94:e6:d6:cd:76:b8:4d:f7:eb:8b:
0a:f4:35:d7:c5:39:5e:d3:c7:c0:5c:fd:73:b5:0a:c2:a1:bc:
b7:cc:13:65:be:9a:7c:e7:8f:3c:68:25:65:d1:ce:f5:64:ff:
b9:22:30:0e:a8:7b:6a:0a:3a:78:bd:e3:2f:20:af:b5:5d:b2:
78:d5:46:f4:45:0a:56:49:b4:a6:70:6a:1d:d8:06:c5:17:ba:
65:07:4c:37:96:3e:26:fe:c4:38:62:65:03:4e:11:48:17:07:
0c:74:23:19:05:1b:c2:8d:3e:f8:de:12:4c:60:0d:b2:a3:90:
32:5e:bb:fd:80:49:06:58:e6:e0:ff:40:3c:93:6b:c7:24:38:
41:0d:5b:88:a8:21:63:6b:e7:d3:52:73:0a:78:ab:20:77:5c:
06:83:ee:6d:22:af:9a:3e:f0:9a:08:98:3e:45:aa:df:46:a6:
3c:e8:cd:ea:f1:65:ca:46:c3:cb:47:c5:8b:b3:9c:d8:e6:00:
6c:7f:35:1a:32:4e:d5:34:78:00:db:14:21:7c:e0:51:72:95:
c4:47:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:51:27 2026 by rpki-client